1219 matches found
CVE-2018-6035
Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension...
CVE-2018-6035
CVE-2018-6035 concerns insufficient isolation of DevTools from extensions in Chromium/Google Chrome, enabling a crafted extension to potentially leak local user data. Affected product: Google Chrome (Chromium base). Root cause: insufficient policy enforcement in DevTools that allows extension int...
CVE-2018-6045
Removed by vendor...
CVE-2018-16075
Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page...
CVE-2018-16367
In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and can leak file data with a include...
Schneider Electric InduSoft Web Studio RCE (Apr 2018)
An installed version of Schneider Electric InduSoft Web Studio is vulnerable to RCE and therefore requires a security update. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109144; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2017-1654
IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378...
CVE-2018-6035
Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension...
PT-2018-17103
Name of the Vulnerable Software and Affected Versions: MIT Kerberos 5 aka krb5 versions prior to 1.17 Description: An issue was discovered where a variable dbentry-n key data in kadmin/dbutil/dump.c, intended for 16-bit data, was assigned a u4 variable meant for 32-bit data. This could allow an...
Hancom Hangul Office HShow!NXDeleteLineObj+0x53692 Code Execution Vulnerability(CVE-2016-4291)
Description This vulnerability was discovered within the Hangul HShow application which is part of the Hangul Office Suite. Hangul Office is published by Hancom, Inc. and is considered one of the more popular Office suites used within South Korea. When opening a Hangul HShow Document .hpt and...
Apple macOS iBooks Sensitive Information Disclosure Vulnerability
Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. iBooks is one of the e-book reading components. A sensitive information disclosure vulnerability exists in the iBooks component of Apple macOS versions prior to 10.12.4. The vulnerability can be exploited by ...
The Japanese version of the WPS remote code execution vulnerability detailed analysis-vulnerability warning-the black bar safety net
Word processing and work product in the vulnerability is the threat actors to exploit the useful target. Users often encounter in everyday life these software packages use the file type, and may in the email to open such a file, or be prompted to download from the website this file does not produ...
CVE-2016-4291
When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will use a field from the structure in an operation that can cause the integer to overflow. This result is then used to allocate memory to copy file data in. Due to the lack of bounds...
CVE-2016-4290
When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a block of data within the file. When calculating this length, the application will use a value from the file and add a constant to it without checking...
CVE-2016-4291
When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will use a field from the structure in an operation that can cause the integer to overflow. This result is then used to allocate memory to copy file data in. Due to the lack of bounds...
HP KeyView Information Disclosure Vulnerability
HP KeyView is a suite of file filtering and conversion software from Hewlett-Packard HP. The software supports the extraction of content, metadata and other relevant attributes from files on multiple platforms. An information disclosure vulnerability exists in HP KeyView that could be exploited b...
CVE-2012-2150
xfsmetadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image...
CVE-2012-2150
xfsmetadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image...
CVE-2012-2150
CVE-2012-2150 affects xfs_metadump in xfsprogs before 3.2.4. The underlying flaw does not properly obfuscate file data, allowing remote attackers to obtain sensitive information by reading a generated image. Public references in connected advisories/plugins confirm patches to 3.2.4 or newer acros...